$ rpki-client -vvf rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft File: BHuLKVTEerFcV1ht0ATriTl3xa8.mft (raw, json) Hash identifier: LhwaccRsoQwSwB10g69pPANh4BtAyGRHe9eVr4cA1sc= Subject key identifier: 8C:AE:F9:75:56:ED:05:C9:D9:45:D5:50:D4:73:F4:99:39:17:EF:02 Authority key identifier: 04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF Certificate issuer: /CN=A918E8EB/serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Certificate serial: 1283 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft Manifest number: 1271 Signing time: Wed 02 Jul 2025 17:17:30 +0000 Manifest this update: Wed 02 Jul 2025 17:17:30 +0000 Manifest next update: Wed 09 Jul 2025 17:17:30 +0000 Files and hashes: 1: BHuLKVTEerFcV1ht0ATriTl3xa8.crl (hash: 7Spki74h2ZxELkcnT9Or9x3FAODTqMuUkn69BufyjJY=) 2: 3489528EC84511ED90A61540C4F9AE02.roa (hash: 0GBU9clR4v/kv/m8Iw+tpC8pBR8oX1ZqIKf4DgtvCco=) 3: 35615A30C84511ED90A61540C4F9AE02.roa (hash: CfO3CZyouhq3VXYxiVm5tnc8saneiKp2zLb93JcMMQ0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:17:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4739 (0x1283) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918E8EB, serialNumber=047B8B2954C47AB15C57586DD004EB893977C5AF Validity Not Before: Jul 2 17:17:30 2025 GMT Not After : Jul 9 17:17:30 2025 GMT Subject: CN=686569aa-75e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:4c:39:37:db:10:05:aa:4c:83:46:07:f8:25: 00:b8:4b:f8:67:f3:e6:a3:2e:69:0e:f0:9b:ff:7f: 87:ae:54:b1:84:bb:cc:b1:69:32:dc:e4:fb:b2:43: 22:57:02:a9:20:49:e4:1d:37:c7:e6:76:66:1a:1a: 6e:37:01:b3:73:5a:43:ed:57:fc:92:c9:ff:3e:cd: 72:cc:f9:61:7a:ee:11:ad:75:ce:0e:9c:03:72:1c: ec:b1:ec:43:b4:91:8d:b5:66:df:8c:b5:1a:b9:f3: 9e:b0:ae:ae:a1:0c:d4:3d:c1:c7:cf:b6:27:a2:e3: 7a:07:9e:54:fa:87:ff:e5:d2:6d:5b:1a:e7:9a:92: 29:35:81:08:e8:b8:67:e4:13:88:59:ca:dd:9c:ed: eb:1e:09:b3:3c:15:39:32:32:c9:94:04:02:a1:72: 9c:31:91:8d:e9:20:0e:09:9b:a6:ba:5f:f8:e7:35: 29:f1:20:ad:2c:c1:b2:56:b9:f0:41:14:73:5b:48: ac:3b:db:8a:28:73:4a:11:8c:de:b9:06:e7:fe:63: 4e:c0:1a:77:29:50:53:b6:bc:29:c5:79:05:a3:70: bb:a4:bf:bf:b9:94:6e:89:00:19:91:13:f5:5f:26: 25:a7:16:fd:26:e7:00:0f:68:42:92:d3:59:61:f5: 47:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AE:F9:75:56:ED:05:C9:D9:45:D5:50:D4:73:F4:99:39:17:EF:02 X509v3 Authority Key Identifier: keyid:04:7B:8B:29:54:C4:7A:B1:5C:57:58:6D:D0:04:EB:89:39:77:C5:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BHuLKVTEerFcV1ht0ATriTl3xa8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E8EB/D039F8D6D1BF11E8B264F65AC4F9AE02/BHuLKVTEerFcV1ht0ATriTl3xa8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ac:cd:ee:95:72:56:7c:2c:2c:bb:09:c9:2b:13:b1:a9:e2: da:fc:5b:9e:92:bd:93:ec:ef:48:9d:f2:95:24:c5:73:55:6c: 07:c6:13:93:a8:4c:ba:5f:ee:21:da:07:bb:c2:4c:70:f9:e9: 0b:34:c8:31:a0:07:e5:01:a3:04:c7:32:01:e7:a5:a9:75:37: 49:0f:27:80:6b:2d:ae:2c:65:51:06:97:b7:69:13:d2:db:ca: f8:06:1a:bd:03:19:9b:c6:c1:84:e8:fc:80:d3:8d:a5:1a:ee: e5:e4:2d:4c:da:69:86:e3:20:06:b9:42:2f:b0:30:57:61:89: 3b:31:38:bd:09:e0:9e:28:1d:52:d3:29:b1:92:c7:ba:22:1b: 4c:cf:cd:f2:a6:ce:63:75:ff:42:0b:c4:fe:3d:52:99:34:fe: 21:3d:d2:af:74:19:e0:cd:e5:ba:9d:fa:92:9f:db:dd:2e:3c: 75:6b:eb:da:86:2c:01:cb:f7:3b:78:c2:b7:3c:be:b4:8a:67: c1:64:71:38:76:e9:30:a9:1a:b5:1c:a1:dd:b6:88:c8:31:55: 89:8c:77:b4:32:92:a9:2a:0e:ed:01:95:c3:5b:0b:5c:9e:00: e7:cb:54:d4:0a:a7:01:76:de:87:eb:ee:6a:8e:5a:02:be:79: 31:9c:3c:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEU4RUIxMTAvBgNVBAUTKDA0N0I4QjI5NTRDNDdBQjE1QzU3NTg2REQwMDRFQjg5 Mzk3N0M1QUYwHhcNMjUwNzAyMTcxNzMwWhcNMjUwNzA5MTcxNzMwWjAYMRYwFAYD VQQDEw02ODY1NjlhYS03NWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA00w5N9sQBapMg0YH+CUAuEv4Z/Pmoy5pDvCb/3+HrlSxhLvMsWky3OT7skMi VwKpIEnkHTfH5nZmGhpuNwGzc1pD7Vf8ksn/Ps1yzPlheu4RrXXODpwDchzssexD tJGNtWbfjLUaufOesK6uoQzUPcHHz7YnouN6B55U+of/5dJtWxrnmpIpNYEI6Lhn 5BOIWcrdnO3rHgmzPBU5MjLJlAQCoXKcMZGN6SAOCZumul/45zUp8SCtLMGyVrnw QRRzW0isO9uKKHNKEYzeuQbn/mNOwBp3KVBTtrwpxXkFo3C7pL+/uZRuiQAZkRP1 XyYlpxb9JucAD2hCktNZYfVHswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyu+XVW 7QXJ2UXVUNRz9Jk5F+8CMB8GA1UdIwQYMBaAFAR7iylUxHqxXFdYbdAE64k5d8Wv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RThFQi9EMDM5RjhENkQx QkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVyRmNWMWh0MEFUcmlUbDN4 YTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JIdUxLVlRFZXJGY1YxaHQwQVRyaVRsM3hhOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RThFQi9EMDM5RjhENkQxQkYxMUU4QjI2NEY2NUFDNEY5QUUwMi9CSHVMS1ZURWVy RmNWMWh0MEFUcmlUbDN4YTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvrM3ulXJWfCwsuwnJKxOxqeLa/Fuekr2T7O9InfKVJMVzVWwHxhOT qEy6X+4h2ge7wkxw+ekLNMgxoAflAaMExzIB56WpdTdJDyeAay2uLGVRBpe3aRPS 28r4Bhq9AxmbxsGE6PyA042lGu7l5C1M2mmG4yAGuUIvsDBXYYk7MTi9CeCeKB1S 0ymxkse6IhtMz83yps5jdf9CC8T+PVKZNP4hPdKvdBngzeW6nfqSn9vdLjx1a+va hiwBy/c7eMK3PL60imfBZHE4dukwqRq1HKHdtojIMVWJjHe0MpKpKg7tAZXDWwtc ngDny1TUCqcBdt6H6+5qjloCvnkxnDx9 -----END CERTIFICATE-----Generated at Fri Jul 4 15:06:32 2025 by rpki-client